Product by Klever-io

    Klever-go

    18 known vulnerabilities in Klever-go (Klever-io), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Klever-go (Klever-io)
    CriticalCVE-2026-54755

    Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

    also in 1 other product

    9.6
    HighCVE-2026-86064

    Klever-Go: /log controls global node logging

    also in 1 other product

    8.6
    HighCVE-2026-55764

    Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

    also in 1 other product

    —
    CriticalCVE-2026-54754

    Klever-io Klever-go: Integer Underflow (Wrap or Wraparound)

    also in 1 other product

    9.6
    HighCVE-2026-82405

    Klever-io Klever-go: Incorrect Authorization

    also in 1 other product

    —
    HighCVE-2026-55763

    Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits

    also in 1 other product

    —
    HighCVE-2026-86065

    Klever-io Klever-go: Allocation of Resources Without Limits or Throttling

    also in 1 other product

    7.5
    HighCVE-2026-82409

    Klever-io Klever-go: Improper Encoding or Escaping of Output

    also in 1 other product

    —
    HighCVE-2026-82407

    Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoS

    also in 1 other product

    —
    HighCVE-2026-82406

    Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace

    also in 1 other product

    —
    HighCVE-2026-52880

    Klever-Go: REST API slow-header connection exhaustion via Gin Engine.Run

    also in 1 other product

    7.5
    HighCVE-2026-52879

    Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS

    also in 1 other product

    7.5
    HighCVE-2026-52878

    Klever-Go: Unauthenticated nil-pointer DoS in P2P transaction validation can halt the chain

    also in 1 other product

    7.5
    HighCVE-2026-47249

    Klever-Go KVM: Hash-array amplification in P2P resolver request handling

    also in 1 other product

    7.5
    HighCVE-2026-44697

    Klever-Go MultiDataInterceptor: remote OOM via crafted compressed P2P payload

    also in 1 other product

    8.6
    MediumCVE-2026-46403

    Klever-Go KVM read-only execution can commit contract delete and upgrade side effects

    also in 1 other product

    6.3
    MediumCVE-2026-49343

    Klever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoS

    also in 1 other product

    5.9
    HighCVE-2026-58262

    Klever-Go: PubKeysBitmap padding bits bypass the BLS signature quorum

    —

    All products by Klever-io